3 ms·

>>"The issue is that no one entity should be able to just sit around and dominate the directory of nodes by claiming "I'm a million nodes, wheee!!!", and so tha

>>"The issue is that no one entity should be able to just sit around and dominate the directory of nodes by claiming "I'm a million nodes, wheee!!!", and so that needs to be "expensive". However, for it to be expensive, they also need a way to make money running the nodes. " I always feel either I'm stupid or I'm missing something when it comes to crypto, Because I understand words and I feel I understand concepts but I don't understand linkages others take for granted, as it pertains to problem at hand of anonymous communication. If nodes are expensive, doesn't nsa have more money than any given privacy focused individual or organizing? If they make money how is it expensive in a useful way I genuinely don't understand how that solution solves a problem, unless they problem is "we need another way to transfer money (ideally to ourselves and early adopters from late adopters)."

saurik 5y ago
> If nodes are expensive, doesn't nsa have more money than any given privacy focused individual or organizing? So, two things are going on in this question. The first is that I doubt KAX17 is the NSA... they might not even be a government! Most systems people build that rely on altruism are so easily attacked that a grad student can take control of them using resources at a University. I appreciate that the bar to prevent the NSA (or the CCP, or whatever other government surveillance network you are most concerned about) taking over your network is high, but the bar right now is just so low for most of these protocols that it should be embarrassing. If the NSA were really the only problem for Tor, I'd call that "a wild success". The second, though, is that the goal should be to get big enough that the NSA would actually have a hard time dominating the resources of the pool. This requires being pretty large, but isn't insanely impossible. Let's look at Bitcoin for a moment: I am one of the first people to agree that "proof of work is probably an immoral way to solve this problem" (due to the externalized environmental effects of electricity usage and the such), but damn if it isn't effective, right? Bitcoin uses 0.5% of the world's electricity. That means to take control of half the Bitcoin network, the NSA would have to build out the infrastructure for buying (and using) an equivalent amount of the world's electricity... I bet that's hard, even for them.
- theamk 5y ago
  Sorry, you are not going to get big enough . Take a look at https://www.crypto51.app/ https://www.crypto51.app/ - you basically need to be top 5 to be too expensive for NSA to attack. And if your network is not in the top 20, it will cost single dollars per hour to attack, putting it within regular team's reach.
  - saurik 5y ago
    FWIW, my personal belief is that when the dust settles in another decade there will only be a metaphorical oligopoly of distributed systems, each of which having generalized in their purposes in order to have "shared security" across a number of different use cases. Regardless, I maintain that Tor doesn't protect against the NSA today (and for even more reasons than come from this article today: the NSA can do attacks that don't even require running nodes, involving stuff like timing analysis attacks that Tor does nothing to prevent), so focusing on the NSA seems like a pointless exercise.
- cycomanic 5y ago
  > > If nodes are expensive, doesn't nsa have more money than any given privacy focused individual or organizing? > So, two things are going on in this question. > The first is that I doubt KAX17 is the NSA... they might not even be a government! The author suspects differently, he does suspect a state actor behind KAX17. Do you have better Information? > Most systems people build that rely on altruism are so easily attacked that a grad student can take control of them using resources at a University. KAX17 at times had bandwidth capabilities of 150 Gbit/s that is getting awfully close to the full bandwidth of the uni and would get noticed and shutdown pretty quickly. You seem to ignore the fact that running nodes with this capabilities requires significant resources. >I appreciate that the bar to prevent the NSA (or the CCP, or whatever other government surveillance network you are most concerned about) taking over your network is high, but the bar right now is just so low for most of these protocols that it should be embarrassing. If the NSA were really the only problem for Tor, I'd call that "a wild success". > The second, though, is that the goal should be to get big enough that the NSA would actually have a hard time dominating the resources of the pool. This requires being pretty large, but isn't insanely impossible. So your solution is "we just need to be big enough"? In that case are you not solving a non problem? If the tor network was big enough all this wouldn't be an issue, no need for any crypto currency constructs. >Let's look at Bitcoin for a moment: I am one of the first people to agree that "proof of work is probably an immoral way to solve this problem" (due to the externalized environmental effects of electricity usage and the such), but damn if it isn't effective, right? Effective at what? Keeping the NSA out? I suspect the NSA (as well as many others) have a good idea about a significant portion of bitcoin ownership. Also mining is highly concentrated, and there isn't even really an incentive for state agencies to try to control it. > Bitcoin uses 0.5% of the world's electricity. That means to take control of half the Bitcoin network, the NSA would have to build out the infrastructure for buying (and using) an equivalent amount of the world's electricity... I bet that's hard, even for them. Rr

saurik 5y ago

> If nodes are expensive, doesn't nsa have more money than any given privacy focused individual or organizing? So, two things are going on in this question. The first is that I doubt KAX17 is the NSA... they might not even be a government! Most systems people build that rely on altruism are so easily attacked that a grad student can take control of them using resources at a University. I appreciate that the bar to prevent the NSA (or the CCP, or whatever other government surveillance network you are most concerned about) taking over your network is high, but the bar right now is just so low for most of these protocols that it should be embarrassing. If the NSA were really the only problem for Tor, I'd call that "a wild success". The second, though, is that the goal should be to get big enough that the NSA would actually have a hard time dominating the resources of the pool. This requires being pretty large, but isn't insanely impossible. Let's look at Bitcoin for a moment: I am one of the first people to agree that "proof of work is probably an immoral way to solve this problem" (due to the externalized environmental effects of electricity usage and the such), but damn if it isn't effective, right? Bitcoin uses 0.5% of the world's electricity. That means to take control of half the Bitcoin network, the NSA would have to build out the infrastructure for buying (and using) an equivalent amount of the world's electricity... I bet that's hard, even for them.

theamk 5y ago
Sorry, you are not going to get big enough . Take a look at https://www.crypto51.app/ https://www.crypto51.app/ - you basically need to be top 5 to be too expensive for NSA to attack. And if your network is not in the top 20, it will cost single dollars per hour to attack, putting it within regular team's reach.
- saurik 5y ago
  FWIW, my personal belief is that when the dust settles in another decade there will only be a metaphorical oligopoly of distributed systems, each of which having generalized in their purposes in order to have "shared security" across a number of different use cases. Regardless, I maintain that Tor doesn't protect against the NSA today (and for even more reasons than come from this article today: the NSA can do attacks that don't even require running nodes, involving stuff like timing analysis attacks that Tor does nothing to prevent), so focusing on the NSA seems like a pointless exercise.
cycomanic 5y ago
> > If nodes are expensive, doesn't nsa have more money than any given privacy focused individual or organizing? > So, two things are going on in this question. > The first is that I doubt KAX17 is the NSA... they might not even be a government! The author suspects differently, he does suspect a state actor behind KAX17. Do you have better Information? > Most systems people build that rely on altruism are so easily attacked that a grad student can take control of them using resources at a University. KAX17 at times had bandwidth capabilities of 150 Gbit/s that is getting awfully close to the full bandwidth of the uni and would get noticed and shutdown pretty quickly. You seem to ignore the fact that running nodes with this capabilities requires significant resources. >I appreciate that the bar to prevent the NSA (or the CCP, or whatever other government surveillance network you are most concerned about) taking over your network is high, but the bar right now is just so low for most of these protocols that it should be embarrassing. If the NSA were really the only problem for Tor, I'd call that "a wild success". > The second, though, is that the goal should be to get big enough that the NSA would actually have a hard time dominating the resources of the pool. This requires being pretty large, but isn't insanely impossible. So your solution is "we just need to be big enough"? In that case are you not solving a non problem? If the tor network was big enough all this wouldn't be an issue, no need for any crypto currency constructs. >Let's look at Bitcoin for a moment: I am one of the first people to agree that "proof of work is probably an immoral way to solve this problem" (due to the externalized environmental effects of electricity usage and the such), but damn if it isn't effective, right? Effective at what? Keeping the NSA out? I suspect the NSA (as well as many others) have a good idea about a significant portion of bitcoin ownership. Also mining is highly concentrated, and there isn't even really an incentive for state agencies to try to control it. > Bitcoin uses 0.5% of the world's electricity. That means to take control of half the Bitcoin network, the NSA would have to build out the infrastructure for buying (and using) an equivalent amount of the world's electricity... I bet that's hard, even for them. Rr